Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
File: d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft (raw, json)
Hash identifier: jXYYVdiabQcjkUwjYWSYoA0aXrQd8hVs41D3rFq2iyg=
Subject key identifier: 85:28:90:51:DE:E7:EF:8E:02:C1:89:E8:C0:5B:D9:A2:D6:08:49:89
Authority key identifier: 77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33
Certificate issuer: /CN=776564fc206c4bc5db58f7efbbb1e8f88499e233
Certificate serial: 0199FFC861D200A3A804E96C440756353A86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
Manifest number: 16E7
Signing time: Mon 20 Oct 2025 04:02:26 +0000
Manifest this update: Mon 20 Oct 2025 04:02:26 +0000
Manifest next update: Tue 21 Oct 2025 04:02:26 +0000
Files and hashes: 1: TsaeWiaMsP1j_z_xMCDhi5soRx0.roa (hash: cFv4JeYxc6KlGhF0oX6eBMNahY8RJkA5Wg3CLEjEyhU=)
2: d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl (hash: osjB3ak5298kexEQ1Oj9oxRg9TDvmZNfyFI9EzTA50Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:61:d2:00:a3:a8:04:e9:6c:44:07:56:35:3a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776564fc206c4bc5db58f7efbbb1e8f88499e233
Validity
Not Before: Oct 20 04:02:26 2025 GMT
Not After : Oct 21 04:02:26 2025 GMT
Subject: CN=85289051dee7ef8e02c189e8c05bd9a2d6084989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8c:4e:20:a5:ff:ba:c3:56:9f:8d:e6:6b:98:
54:64:af:ce:5e:17:ed:3d:93:c8:97:89:05:c9:1a:
a0:10:12:23:74:ae:d0:29:77:02:75:8a:30:0c:f2:
fa:03:57:03:20:13:f4:8b:6b:a4:97:fa:d0:59:2b:
5e:6d:33:78:0d:16:3e:88:60:e3:ed:d4:83:b8:ba:
15:66:c5:d1:1f:86:84:96:93:89:c2:cb:6e:80:c2:
e7:06:36:10:2f:67:64:53:4c:5b:35:7c:d3:3a:6f:
26:e2:7f:8f:56:d2:0e:47:81:36:a0:04:d0:fd:1f:
02:0b:06:ba:1f:2c:b1:d3:30:e9:7b:7f:53:a1:92:
1d:a8:c5:dd:58:f2:3a:ff:4d:49:fd:21:82:55:a4:
f3:72:83:45:4d:c8:7c:80:4e:68:70:ee:1a:94:76:
e7:63:21:46:5e:c0:6a:33:1f:e1:c8:3c:83:4b:0d:
6d:96:74:02:04:bc:c8:d7:fb:41:1a:72:e2:fa:95:
bb:63:77:3f:6b:4c:0b:5a:81:14:87:f2:db:a1:aa:
46:5d:8a:88:e3:bc:96:08:e5:a9:08:18:7f:4b:a1:
46:11:c9:a4:cc:42:65:7b:ca:53:87:e6:ee:75:ee:
d3:a2:43:8a:26:33:56:13:58:5d:56:44:d0:fb:84:
a2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:28:90:51:DE:E7:EF:8E:02:C1:89:E8:C0:5B:D9:A2:D6:08:49:89
X509v3 Authority Key Identifier:
keyid:77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:07:99:8c:8b:93:a5:dd:c3:6a:cd:9f:74:35:cd:80:a5:38:
ec:29:48:0b:e7:ae:9a:3c:7c:f8:11:6c:97:26:60:a2:bb:ac:
42:b3:49:9c:8a:f0:1d:b5:fb:a3:ec:89:ce:a9:cb:07:ff:e8:
fd:23:74:21:49:da:59:31:82:8a:a6:de:d5:60:0f:ea:01:da:
4c:f9:22:4a:02:75:aa:52:6b:cd:ed:67:fd:bf:50:ce:20:18:
eb:f5:78:49:7a:0c:bd:46:4e:e1:f3:b4:21:19:3d:37:9c:45:
21:98:ee:1b:5e:fc:7c:f6:4c:7a:bc:df:89:7d:5a:59:e1:a2:
80:7a:fd:ad:7d:fd:b0:1a:f3:17:90:c7:95:bd:d1:12:fb:f6:
42:1c:ba:17:e8:b3:72:2e:7a:6c:ca:17:fd:fa:8e:03:3a:28:
62:aa:74:95:5c:11:9e:3a:c0:42:78:ae:c4:1e:38:7a:3a:27:
73:77:4c:60:3c:04:54:0b:b2:0d:38:e5:c5:46:99:31:d0:92:
2f:06:c4:91:22:2a:a5:65:a4:44:23:d9:fa:46:35:5f:38:58:
4c:09:3c:1a:06:be:79:79:2b:df:e2:4b:4e:e0:9e:5b:a8:2e:
fb:09:ca:e1:f9:da:0e:06:b4:c0:12:6f:3d:89:f5:07:90:8c:
ab:3b:79:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:33:41 2025 by rpki-client